fa7798ff8e86f65aacb822e87bd6fc80N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fa7798ff8e86f65aacb822e87bd6fc80N.exe
Size

160KB
MD5

fa7798ff8e86f65aacb822e87bd6fc80
SHA1

b126689f24e5154b6f3f79bbb4f5028c89c25586
SHA256

4eb4492b49a72c1579067c46a3266cfca63cc08e7e455c162bef05994471584b
SHA512

41f54e7a16b262826a4b100d29fce155f7eb64f02c0914cca1129ea6cfd3516e3b237433f2620719b7a91b3a811e5c0ad788dc8481f6f0614ad2e32e4aa52fd6
SSDEEP

1536:/bXOolo7t6OpfhFNW+WtMQB4cZ4cofYoCfeqI3UaxiE5mYm/QX4R8hl3zTFaUaj+:zXERJ+lgwoCfdGxiKTFaUajMjQV4K2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa7798ff8e86f65aacb822e87bd6fc80N.exe

Files

fa7798ff8e86f65aacb822e87bd6fc80N.exe
.dll windows:4 windows x86 arch:x86

ca8569c4015bf3d04690c94e02d94a8d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

libglib-2.0-0

g_intern_static_string
g_log
g_mutex_lock
g_mutex_unlock
g_once_init_enter
g_once_init_leave

libgobject-2.0-0

g_object_class_install_property
g_param_spec_boolean
g_param_spec_uint64
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_name
g_type_register_static_simple
g_value_get_boolean
g_value_get_uint64
g_value_set_boolean
g_value_set_uint64

libgstaudio-1.0-0

gst_audio_buffer_clip
gst_audio_info_from_caps
gst_audio_info_init
gst_audio_info_is_equal
gst_audio_stream_align_free
gst_audio_stream_align_get_alignment_threshold
gst_audio_stream_align_get_discont_wait
gst_audio_stream_align_mark_discont
gst_audio_stream_align_new
gst_audio_stream_align_process
gst_audio_stream_align_set_alignment_threshold
gst_audio_stream_align_set_discont_wait
gst_audio_stream_align_set_rate

libgstbase-1.0-0

gst_adapter_available
gst_adapter_clear
gst_adapter_new
gst_adapter_push
gst_adapter_take_buffer

libgstreamer-1.0-0

_gst_debug_category_new
_gst_debug_min
_gst_debug_register_funcptr
gst_buffer_get_size
gst_debug_log
gst_element_add_pad
gst_element_class_add_pad_template
gst_element_class_set_static_metadata
gst_element_get_type
gst_element_register
gst_event_copy_segment
gst_event_parse_caps
gst_mini_object_unref
gst_object_unref
gst_pad_event_default
gst_pad_new_from_static_template
gst_pad_peer_query
gst_pad_push
gst_pad_query_default
gst_pad_set_chain_function_full
gst_pad_set_event_function_full
gst_pad_set_query_function_full
gst_pad_use_fixed_caps
gst_param_spec_fraction
gst_plugin_register_static
gst_query_parse_latency
gst_query_set_latency
gst_segment_init
gst_static_pad_template_get
gst_util_uint64_scale
gst_value_get_fraction_denominator
gst_value_get_fraction_numerator
gst_value_set_fraction

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__dllonexit
_amsg_exit
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
free
fwrite
malloc
memcpy
strlen
strncmp
vfprintf

Exports

Exports

_nm___gst_debug_min
gst_audio_buffer_split_get_type
gst_plugin_audiobuffersplit_get_desc
gst_plugin_audiobuffersplit_register

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 968B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 233B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 884B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 1024B - Virtual size: 629B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca8569c4015bf3d04690c94e02d94a8d

Headers

File Characteristics

Imports

libglib-2.0-0

libgobject-2.0-0

libgstaudio-1.0-0

libgstbase-1.0-0

libgstreamer-1.0-0

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 156B

.rdata Size: 2KB - Virtual size: 1KB

.bss Size: - Virtual size: 968B

.edata Size: 512B - Virtual size: 233B

.idata Size: 4KB - Virtual size: 4KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 1024B - Virtual size: 884B

/4 Size: 1024B - Virtual size: 632B

/19 Size: 63KB - Virtual size: 63KB

/31 Size: 7KB - Virtual size: 6KB

/45 Size: 6KB - Virtual size: 6KB

/57 Size: 3KB - Virtual size: 2KB

/70 Size: 1024B - Virtual size: 629B

/81 Size: 13KB - Virtual size: 13KB

/92 Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 156B

.rdata
Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 968B

.edata
Size: 512B - Virtual size: 233B

.idata
Size: 4KB - Virtual size: 4KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 1024B - Virtual size: 884B

/4
Size: 1024B - Virtual size: 632B

/19
Size: 63KB - Virtual size: 63KB

/31
Size: 7KB - Virtual size: 6KB

/45
Size: 6KB - Virtual size: 6KB

/57
Size: 3KB - Virtual size: 2KB

/70
Size: 1024B - Virtual size: 629B

/81
Size: 13KB - Virtual size: 13KB

/92
Size: 1KB - Virtual size: 1KB